51 to 75 of 80 NCSC Jobs in the UK excluding London

Experience in cyber risk management, ideally in a regulated or critical infrastructure environment Understanding of cyber risk frameworks (ISO 27005, NIST, FAIR) and the NCSC CAF Degree or equivalent in cyber security, risk management, or a related field Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager) Working knowledge ...

management. Knowledge of SAST, DAST, SCA and automated security testing. Understanding of cloud security, containers and modern application architectures. Familiarity with OWASP, ISO27001 and NCSC CAF. Awareness of emerging threats, AI security risks and software supply chain vulnerabilities. Location: Hybrid working, with travel to Warwickshire required a couple of times ...

Intune. Knowledge of Zero Trust principles, cloud vulnerabilities and security configuration. Scripting and automation experience using Python, Java, C# or JavaScript. Familiarity with ISO27001, NCSC CAF and wider security frameworks. Location: Hybrid working, with travel to Warwickshire required a couple of times per month. Salary: £60,000 £75,000 + ...

Azure or FinOps certifications would be advantageous, as would an understanding of security and compliance frameworks such as Cyber Essentials, ISO 27001 and NCSC guidance. What You Will Get in Return : This role offers a high six-figure base salary , plus performance-based incentives and an annual bonus, directly rewarding ...

Satellite. Windows PKI, Entra ID, AD Connect or ADFS. Active Directory migrations and server upgrades. PowerShell, Python or Ansible automation. CIS/NCSC security baselines and air-gapped environments. Relevant Microsoft, VMware, Red Hat or ITIL certifications. This is an excellent opportunity for an experienced Infrastructure or Active Directory Engineer ...

environments Turning security findings into practical remediation plans and helping clients implement them Hardening systems and infrastructure in line with standards including CIS Benchmarks, NCSC guidance and ISO 27001 Developing scripts, automation and internal security tooling Acting as a trusted technical point of contact for clients Explaining complex cyber security … security certifications Experience with offensive security tools such as Burp Suite, Nmap, Metasploit, BloodHound or Cobalt Strike Knowledge of MITRE ATT&CK, NIST CSF, NCSC CAF or ISO 27001 Terraform, Ansible, DevSecOps or CI/CD experience An interest in AI and automation within cyber security Existing ...

building user facing AI products (listed above) Expert in AWS Experience working to common security frameworks including CAF, Secure/Privacy by Design or NCSC policies. Multiple digital product releases at a national scale SC Clearance required - for existing holders your clearance would need to be transferred before starting. ...

teaming or threat assessments. The successful candidate must hold SC clearance before starting. Experience with agentic development, AI evaluation, secure-by-design principles, NCSC guidance, the Cyber Assessment Framework (CAF), privacy and user experience management would be advantageous. AWS certifications or a computer science qualification would also be useful ...

plan Awareness of emerging standards (NIST PQC, CNSA 2.0) and vendor tooling in this space Relevant cryptography/security certification or academic background preferred; NCSC or industry quantum-readiness experience a strong plus Why Consultants choose the ATC Work that moves you forward When a project fits your skills ...

such as MQTT, OPC UA, Modbus, and DNP3. Understanding of connectivity technologies including LoRaWAN, NB IoT, and 5G. Experience aligning architecture to NIS regulations, NCSC CAF, IEC 62443, and ISO 27001. Strong grasp of data platform architecture, integration patterns, standardisation, and contextualisation. Ability to translate complex technical concepts into clear ...

trusted cyber security specialist within client delivery teams. Support secure-by-design activity across projects, products and technology change. Turn frameworks such as NCSC CAF, NIST CSF, ISO 27001 and IEC 62443 into clear, practical requirements. Support security assurance, risk assessment and control implementation across client programmes. Enable compliance with … applicable regulation and guidance (e.g. NIS/NIS2, NCSC CAF) through pragmatic interpretation and implementation. Build strong working relationships with senior stakeholders, programme teams and suppliers. Help develop reusable tools, playbooks and guidance that make delivery more consistent. Share knowledge, coach others and contribute to the growth of the wider ...

years in power generation with supervisory experience. Experience of working with OT security solutions and within regulatory frameworks such as the NIS Directive or NCSC Cyber Assessment Framework. A power generation background, ideally thermal and/or CCGT plant, with knowledge of process control, instrumentation and HV electrical systems. Salary ...

/IDNO interface. Desirable: Understanding of grid code compliance, telemetry, and DNO/NGESO interface requirements. Experience with cybersecurity standards (ISO 27001, NCSC CAF, etc.) for OT systems. Proficiency with Procore, BIM 360, or similar digital collaboration platforms. Chartered Engineer or working toward professional registration (IET or equivalent). What ...

senior stakeholders, with opportunities to contribute to bids and business development. Key responsibilities: Lead cyber security audits and assessments against recognised frameworks, including the NCSC Cyber Assessment Framework (CAF). Evaluate security controls, organisational resilience and compliance throughout the system lifecycle. Identify vulnerabilities, risks and areas for improvement, producing clear … Support bid development and pre-sales activities where required. Essential Experience Proven experience leading cyber security audits and assurance engagements. Strong knowledge of the NCSC CAF, ISO 27000-series standards, NIST frameworks and associated risk management practices. Understanding of legacy information assurance standards and NCSC guidance. Familiarity with MOD security ...

data, essential services and the supporting infrastructure. They ensure Secure by Design principles are adopted, and coordinate on assurance against the National Cyber Security Centre's Cyber Assessment Framework with the Government's GovAssure framework. Working Style This role will be carried out in-line with IPO Hybrid working arrangements … limited to: Ensure security architecture aligns with wider Gov security policies and frameworks, legal frameworks, industry regulations and best practise (e.g ISO 27001, NCSC Standards, GDPR, PCI DSS, GovAssure, Secure by Design) Support the secure by design champion in building awareness and understanding of secure by design framework across DDaT. ...

senior leadership and the Board. Ensure alignment with relevant legislation, UK GDPR and recognised security frameworks including ISO 27001, Cyber Essentials Plus and NCSC principles. Oversee vulnerability management, penetration testing, security monitoring and incident response. Lead the organisational response to significant cyber security incidents. Develop and maintain cyber incident response … following would be highly advantageous: CISSP, CISM, CRISC or CCSP ISO/IEC 27001 Lead Implementer or Lead Auditor Cyber Essentials Plus NCSC Cyber Assessment Framework Operational Technology (OT) and Industrial Control Systems (ICS) Manufacturing, engineering, energy, chemical, defence or another highly regulated environment High-hazard or safety-critical industries ...

CREST-accredited providers and incorporating red and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement … controls, including defining security standards and configuration baselines, monitoring control effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. ...

Conduct IEC 62443 gap assessments and support customers in achieving compliance and maturity objectives. Perform cyber security maturity assessments using recognised frameworks such as NCSC CAF, IEC 62443, NIST SP 800-82, and ISO 27001. Advise clients on NIS and NIS2 compliance requirements and support readiness programmes. Produce remediation roadmaps … SCADA, PLCs, DCS, and industrial networks. Experience conducting security assessments, gap assessments, or cyber maturity reviews. Knowledge of industry frameworks such as IEC 62443, NCSC CAF, NIS/NIS2, or equivalent OT security standards. Ability to identify cyber security risks and develop practical remediation recommendations. Experience engaging with technical, operational ...

cloud infrastructure. Integration & Security: Architect resilient API and event-driven integration patterns (APIM, Event Grid, Service Bus) while embedding security-by-design aligned with NCSC guidelines and UK GDPR. Required Skills & Experience Designing scalable, secure and resilient solutions combining bespoke Scala with low-code Power Platform (Power Apps, Power Automate … platforms (e.g., Azure APIM, Logic Apps). Public Sector Standards: Solid working knowledge of the GDS Service Standard , Technology Code of Practice (TCoP) , and NCSC Cloud Security Principles . Governance & Stakeholder Management: Proven ability to defend designs at governance boards and translate complex architectural concepts to executive stakeholders. Desirable Qualifications ...

CREST-accredited providers and incorporating red and purple team activity into the wider assurance programme. Supporting security assurance against frameworks and standards including the NCSC Cyber Assessment Framework, ISO 27001, NIST CSF 2.0 and Cyber Essentials Plus. Communicating technical risk and control weaknesses clearly to senior stakeholders, balancing security improvement … controls, including defining security standards and configuration baselines, monitoring control effectiveness and drift, managing exceptions and driving remediation of identified weaknesses. Knowledge of the NCSC CAF and at least one of ISO 27001 or NIST CSF 2.0. Experience of zero trust and identity architecture, including conditional access and adaptive authentication. ...

community. * Ensure compliance with relevant nuclear and cyber security standards, which could include: -ISO/IEC 27001 (Cyber Security Management) -UK NIS 18 regulations -NCSC guidance -NIST SP 800 Series -Codes and Standards for the Cyber Security of AI (2025) - DSIT -NR Security Assessment Principles (SyAPs) * Develop and maintain … matters concerning cyber security and assurance. * Manage and oversee the internal relationships with security stakeholders. Leading external cyber security relationships, to include NCSC and ONR. Policy and Process * Create and maintain policies and associated processes required to enable risk-informed decision making concerning the protection of information. * Ownership of forward ...

Develop an identity strategy covering Cloud Identity, Workforce Identity Federation and Microsoft Entra ID integration . Define security architecture aligned with Secure by Design, NCSC guidance and the Cyber Assessment Framework (CAF) . Design FinOps governance, billing hierarchies, cost allocation and chargeback models. Develop an operational transition model to support … organisation policies, folder structures and identity management. Experience delivering cloud security architecture within UK government or regulated environments. Strong understanding of Secure by Design, NCSC guidance and CAF principles . Experience designing FinOps and cloud cost-management frameworks. Excellent stakeholder engagement, technical leadership and architecture governance skills. Security clearance Active ...

governance, risk management and the implementation of good practice. Applying recognised frameworks and standards, including ISO 27001, NIST Cybersecurity Framework (NIST CSF) and the NCSC Cyber Assessment Framework (CAF). Supporting existing OT security engagements, learning the client environments and progressively assuming responsibility for their ongoing delivery. Adapting quickly between … information security risk assessment, risk treatment, security controls and governance. Security frameworks: Practical knowledge of ISO 27001, NIST CSF and/or the NCSC Cyber Assessment Framework. You should be comfortable applying frameworks to real client environments rather than simply discussing them theoretically. Independent delivery: The maturity, initiative and adaptability ...

into clear business implications and recommendations for senior stakeholders. Working with recognised cyber security frameworks, standards and regulatory requirements, including NIST CSF, ISO 27001, NCSC CAF, CRI and NIS2. Leading multidisciplinary teams, setting direction and maintaining high-quality delivery. Managing delivery risks, dependencies, competing priorities and client expectations. Building trusted … risk or capability and translating findings into clear actions or transformation roadmaps. Knowledge of recognised frameworks and standards such as NIST CSF, ISO 27001, NCSC CAF, CRI or NIS2. Strong client-facing experience with the ability to build credibility with senior stakeholders. Experience leading teams, engagements or significant project workstreams. ...

service management. Define the identity strategy across Cloud Identity, Workforce Identity Federation and Microsoft Entra ID. Design security architecture aligned with Secure by Design, NCSC guidance and the Cyber Assessment Framework. Establish FinOps governance, billing hierarchies, cost-allocation and chargeback approaches. Produce an operational transition model for the transfer … organisation policies and identity-management approaches. Experience designing cloud-security architecture within government or regulated environments. Strong understanding of Secure by Design, NCSC guidance and CAF requirements. Experience designing FinOps and cloud cost-management models, alongside strong stakeholder and architecture-governance skills. ...